$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef7d1ef8-1654-4f0b-bcaa-f87ca4e62dc2.roa File: ef7d1ef8-1654-4f0b-bcaa-f87ca4e62dc2.roa (raw, json) Hash identifier: HKOnSvLUFGlchXO70JfKDy/mYEnys+VuiB+jJ1cowzA= Subject key identifier: F6:C9:01:A8:CC:23:B8:AB:A1:61:1E:81:39:4D:85:A8:6B:FA:97:71 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1BCC01476739F78AA38D19802E1809E9D12CECA8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef7d1ef8-1654-4f0b-bcaa-f87ca4e62dc2.roa Signing time: Sat 24 Oct 2026 01:20:07 +0000 ROA not before: Sat 24 Oct 2026 01:20:07 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 52.119.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cc:01:47:67:39:f7:8a:a3:8d:19:80:2e:18:09:e9:d1:2c:ec:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 24 01:20:07 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=e098138cf20cd4b62b7ca7a2e91727a0b0e313e365fd9be35ee0affbfe5b49c0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:52:f6:0a:53:3b:92:14:a0:a2:6c:5e:c6: b6:fd:ca:a2:30:b2:58:66:e0:c0:86:95:ca:02:33: 93:85:6a:9c:31:37:d9:0a:bc:09:ba:4e:2d:41:f8: 31:4e:35:3e:ab:f8:8a:4d:88:ee:a8:6b:bf:22:ed: db:d2:a9:d5:62:37:bf:bb:b7:16:d1:17:da:eb:6a: 64:32:d3:00:d4:9e:54:b4:84:3b:44:ff:89:f0:97: d9:f3:64:fc:23:bb:9a:51:6d:04:a0:e5:61:90:86: 3d:4d:ac:5b:24:d3:a7:84:a9:3d:11:62:45:fb:60: 50:be:39:3a:cd:7b:4f:66:ea:3f:03:c3:ac:d4:cc: 6c:33:ca:fc:3d:86:6e:f0:a0:a5:a2:19:e2:a4:6b: 43:a8:c1:a7:5c:26:0c:67:e5:55:8a:e7:92:90:3b: e4:cf:71:8d:ba:f3:41:f8:5a:1f:9f:54:12:e6:c2: 24:35:5e:98:43:eb:fe:47:5a:f0:82:b6:ec:5e:f1: 2f:7f:70:18:8d:eb:2d:64:80:f1:9f:00:56:d3:0f: f0:5f:09:d3:7e:58:21:62:3e:81:e3:09:94:02:06: 94:02:20:f2:32:19:45:a1:88:21:24:c9:32:be:a6: 47:0d:25:68:96:e2:4e:cd:c5:5b:66:09:8c:54:e2: 79:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C9:01:A8:CC:23:B8:AB:A1:61:1E:81:39:4D:85:A8:6B:FA:97:71 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef7d1ef8-1654-4f0b-bcaa-f87ca4e62dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.119.144.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:f6:c4:76:67:b4:61:a7:52:79:71:c2:1a:87:ab:aa:1e:9e: 2c:ed:5e:89:bc:83:78:0e:25:dd:97:37:5d:6f:09:63:c2:63: 78:14:59:25:7d:83:2a:68:2a:d6:85:a1:e2:aa:bb:61:d2:c4: f0:0c:28:cb:a6:95:d1:8f:9e:fb:d8:05:68:be:74:2b:bc:08: f5:7c:a3:65:d0:72:de:3e:a4:9c:3b:02:cc:fe:8f:7e:fc:a1: 68:4f:05:e6:03:59:7e:5a:45:9e:7a:a9:82:21:b1:02:4e:88: 26:a1:8c:11:48:5c:9f:8f:0e:c0:4f:9d:5c:49:92:31:3b:be: 1b:49:bc:8c:0f:e8:c8:9a:b8:e6:65:25:00:dc:e7:99:0d:d7: 4f:0c:d0:f4:45:8f:dc:cf:7d:74:90:df:cc:3e:cd:ea:18:18: f1:1b:b1:ee:30:ee:56:b8:78:5f:74:f0:fa:f8:c1:2b:e4:7e: 02:c7:3e:3e:7c:1a:b9:e8:94:00:06:24:54:5b:a4:7b:ec:25: fe:fe:8b:81:02:b0:1a:ac:94:2e:4c:52:98:33:44:57:6d:f1: de:08:a5:6f:95:f2:dd:02:6b:ad:08:6d:3c:49:9a:bd:92:a1: af:e9:a1:f5:f5:03:eb:ae:10:df:bc:53:e4:68:c2:c7:ec:03: d3:a3:9e:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG8wBR2c594qjjRmALhgJ6dEs7KgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI0MDEyMDA3WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDk4MTM4Y2YyMGNkNGI2MmI3Y2E3YTJlOTE3MjdhMGIw ZTMxM2UzNjVmZDliZTM1ZWUwYWZmYmZlNWI0OWMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtGFL2ClM7khSgomxexrb9yqIwslhm4MCGlcoCM5OFapwx N9kKvAm6Ti1B+DFONT6r+IpNiO6oa78i7dvSqdViN7+7txbRF9rramQy0wDUnlS0 hDtE/4nwl9nzZPwju5pRbQSg5WGQhj1NrFsk06eEqT0RYkX7YFC+OTrNe09m6j8D w6zUzGwzyvw9hm7woKWiGeKka0OowadcJgxn5VWK55KQO+TPcY2680H4Wh+fVBLm wiQ1XphD6/5HWvCCtuxe8S9/cBiN6y1kgPGfAFbTD/BfCdN+WCFiPoHjCZQCBpQC IPIyGUWhiCEkyTK+pkcNJWiW4k7NxVtmCYxU4nkZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9skBqMwjuKuhYR6BOU2FqGv6l3EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmN2QxZWY4LTE2NTQtNGYwYi1iY2FhLWY4N2NhNGU2MmRjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM0d5AwDQYJKoZIhvcNAQELBQADggEBAFz2xHZntGGnUnlxwhqHq6oenizt Xom8g3gOJd2XN11vCWPCY3gUWSV9gypoKtaFoeKqu2HSxPAMKMumldGPnvvYBWi+ dCu8CPV8o2XQct4+pJw7Asz+j378oWhPBeYDWX5aRZ56qYIhsQJOiCahjBFIXJ+P DsBPnVxJkjE7vhtJvIwP6MiauOZlJQDc55kN108M0PRFj9zPfXSQ38w+zeoYGPEb se4w7la4eF908Pr4wSvkfgLHPj58GrnolAAGJFRbpHvsJf7+i4ECsBqslC5MUpgz RFdt8d4IpW+V8t0Ca60IbTxJmr2Soa/pofX1A+uuEN+8U+RowsfsA9OjnvA= -----END CERTIFICATE-----Generated at Sat Nov 7 17:06:25 2026 by rpki-client